spec test for access in catalog controller
Merge pull request #19 from mark-dce/more_access

#10 spec test for access in catalog controller